Example: Matching Packets Based on Two Unrelated Criteria
Match packets that are either OSPF packets or packets that come from an address in the prefix 10.108/16, and send an administratively-prohibited ICMP message for all packets that do not match:
[edit]firewall {family inet {filter ospf-or-131 {term protocol-match {from {protocol ospf;}}term address-match {from {source-address {10.108.0.0/16;}}}}}}
